For this article we have used PuTTY Release 0.73.

Quick Start

  1. Start Pageant and add your private SSH-Key.
  2. Start PuTTY and establish a new Connection to MOGON
  3. Enter the second Factor from freeOTP or PrivacyIDEA when asked for privacyIDEA_Authentication

Add your SSH-Key to MOGON

If you have not yet deployed your SSH-Key on MOGON, please follow these instructions to add your public key to MOGON.
Download PuTTY (preferrably use the MSI installer package1)) and install it on your computer. The following steps will show you how to configure the PuTTY terminal.
  1. Start Pageant. By default it starts minimized in the system tray.
  2. Add your SSH-Key by right clicking on the icon. Click on View Keys in the following context menu.
  3. Click on Add Key. This will open the file explorer, where you can choose your SSH-Key to load. Make sure you select files with the .ppk extension.
  4. Click the Open button to load the SSH-Key with Pageant.
  5. You will be prompted to enter your passphrase, before the Key can be added to the Pageant key list.

Generating an SSH Key Pair

In case you don't have a ssh key yet you can follow these guideline.

Pageant running?

Make sure Pageant is running and your SSH-Keys are added before your try to establish a connection to MOGON
  1. Before being able to transparently proxy your connection to MOGON service nodes through the HPCGATE, you need to connect to the host manually once and accept the SSH host key. Open PuTTY and enter <username> in the Host Name field and use Port 22. Click on Open afterwards. When PuTTY prompts you for host key validation, accept it. Then close the window again.
  2. Start a new PuTTY Session and enter the HostName of the MOGON service node you want to access. You can find an overview of the MOGON service nodes here.
  3. In the menu on the left side, in the category Connection select the subcategory Data
    • Fill in your <username> in the field Auto-login username
  4. Now select Proxy in the category Connection and
    1. Set Proxy type to local,
    2. Fill in for the Proxy hostname and 22 for the Port,
    3. Enter your <username> in the field Username,
    4. Enter "C:\Program Files\PuTTY\plink.exe" -4 -P %proxyport -l %user %proxyhost -nc %host:%port as local proxy command.
      Maybe the path to plink.exe is different on your system. Make sure you have checked the path before.
  5. Within the Connection category select SSH and then the subcategory Auth. Disable Allow agent forwarding and enable Attempt authentication using Peagant.
  6. Now go back to the Session category and enter a name for your session in the field under Saved Sessions. Click on Save to save the session profile for further use.
To enable X11 forwarding click on X11 in the SSH subcategory, and click on the Enable X11 forwarding option. Make sure that the remote X11 authentication protocol is set to MIT-Magic-Cookie-1.

Be sure to add -X to the local Proxy command line.

X11 forwarding requires either VcXsrv Windows X Server or Xming to be installed on your computer.

On a UNI Mainz Domain-pC you can install Xming via the ZDV Apps.

If you want to use WinSCP, configure it according to these screenshots:


this instruction require that you use Pageant for SSH authentication
Example configuration with the username <username>

because in addition to the plain putty.exe you will most definitely need plink.exe for proxy connection, puttygen.exe for key generation and pageant.exe for key-based authentication
  • start/mogon_cluster/access_from_outside_windows/using_putty.txt
  • Last modified: 2021/12/05 20:16
  • by jrutte02